PT-2025-41290 · Sourcecodester · Student Grades Management System

Sidzeroday · Published 2025-10-08 · Updated 2025-10-09 · CVE-2025-11485

Positive Technologies (AI Summary)

CVSS v3.1

4.8

Medium

Base vector

AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:N

Name of the Vulnerable Software and Affected Versions SourceCodester Student Grades Management System version 1.0

Description A security issue exists in SourceCodester Student Grades Management System. The add user function within the /admin.php file, specifically in the Manage Users Page component, is susceptible to cross site scripting due to manipulation of the first name and last name arguments. This issue can be exploited remotely. The details of the issue have been publicly disclosed.

Recommendations Apply any available updates to address the vulnerability in the add user function of the /admin.php file. As a temporary workaround, consider restricting or sanitizing input to the first name and last name parameters of the add user function.

Exploit

Fix

XSS

Code Injection

Weakness Enumeration

CWE-79

CWE-94

Related Identifiers

CVE-2025-11485

Affected Products

Student Grades Management System

References · 10

• 🔥 https://github.com/sidzeroday/sourcecodester_cve/blob/main/README.md · Exploit
• https://osv.dev/vulnerability/CVE-2025-11485 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-11485 · Security Note
• https://twitter.com/CVEnew/status/1975977587349299258 · Twitter Post
• https://vuldb.com/?ctiid.327602 · Note
• https://twitter.com/VulmonFeeds/status/1976090191493271590 · Twitter Post
• https://sourcecodester.com · Note
• https://t.me/CVEtracker/34462 · Telegram Post
• https://vuldb.com/?submit.667406 · Note
• https://vuldb.com/?id.327602 · Note